NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] VPN Question - ICMP Packet Out of State - Linksys BEFVP41



you created a cluster object?

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[email protected]]On Behalf Of
Kinsey, Brian A.
Sent: 16 May 2002 16:49
To: [email protected]
Subject: [FW-1] VPN Question - ICMP Packet Out of State - Linksys
BEFVP41


I am trying to set up a VPN between my NG FP1 FW and a Linksys BEFVP41. I
see the key installs in my log, and the Linksys shows the Status as
Connected, but I cannot access machines across the tunnel. When I try to
ping from a machine behind the Linksys to a machine inside my firewall, I
get request timed out. In my firewall log, I see the following:

Source = firewall external IP
Destination = Linksys external IP
Action = Drop
Info = icmp-type 3 icmp-code 2 message_info ICMP packet out of state


Also, my firewalls are Nokias with VRRP (monitored circuit). If I enter the
virtual external address of my firewalls into the Remote Security Gateway
field on the Linksys, I don't even get the key installs. I have to enter the
actual IPs of one of the firewalls for it to get that far. Any ideas as to
why I can't terminate my VPNs to the virtual IP?

Thanks,
Brian

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.